|
1 | | -name: Run Release Please |
| 1 | +name: Release Please |
2 | 2 |
|
3 | 3 | on: |
4 | 4 | push: |
5 | 5 | branches: |
6 | 6 | - main |
7 | 7 |
|
8 | 8 | jobs: |
9 | | - release-package: |
| 9 | + release-please: |
10 | 10 | runs-on: ubuntu-latest |
11 | 11 | permissions: |
12 | | - id-token: write # Needed if using OIDC to get release secrets. |
13 | 12 | contents: write # Contents and pull-requests are for release-please to make releases. |
14 | 13 | pull-requests: write |
15 | 14 | outputs: |
16 | 15 | release-created: ${{ steps.release.outputs.release_created }} |
17 | | - upload-tag-name: ${{ steps.release.outputs.tag_name }} |
18 | | - gem-hash: ${{ steps.publish.outputs.gem-hash}} |
| 16 | + tag-name: ${{ steps.release.outputs.tag_name }} |
19 | 17 | steps: |
20 | 18 | - uses: googleapis/release-please-action@v4 |
21 | 19 | id: release |
22 | | - |
23 | | - - uses: actions/checkout@v4 |
24 | | - if: ${{ steps.release.outputs.releases_created == 'true' }} |
25 | | - with: |
26 | | - fetch-depth: 0 # If you only need the current version keep this. |
27 | | - |
28 | | - - uses: launchdarkly/gh-actions/actions/release-secrets@release-secrets-v1.2.0 |
29 | | - if: ${{ steps.release.outputs.releases_created == 'true' }} |
30 | | - name: 'Get rubygems API key' |
31 | | - with: |
32 | | - aws_assume_role: ${{ vars.AWS_ROLE_ARN }} |
33 | | - ssm_parameter_pairs: '/production/common/releasing/rubygems/api_key = GEM_HOST_API_KEY' |
34 | | - |
35 | | - - uses: ./.github/actions/ci |
36 | | - if: ${{ steps.release.outputs.releases_created == 'true' }} |
37 | | - with: |
38 | | - ruby-version: 3.0 |
39 | | - |
40 | | - - uses: ./.github/actions/build-docs |
41 | | - if: ${{ steps.release.outputs.releases_created == 'true' }} |
42 | | - |
43 | | - - uses: ./.github/actions/publish |
44 | | - id: publish |
45 | | - if: ${{ steps.release.outputs.releases_created == 'true' }} |
46 | | - with: |
47 | | - dry_run: false |
48 | | - |
49 | | - - uses: ./.github/actions/publish-docs |
50 | | - if: ${{ steps.release.outputs.releases_created == 'true' }} |
51 | | - with: |
52 | | - token: ${{secrets.GITHUB_TOKEN}} |
53 | | - |
54 | | - release-provenance: |
55 | | - needs: [ 'release-package' ] |
56 | | - if: ${{ needs.release-package.outputs.release-created == 'true' }} |
57 | | - permissions: |
58 | | - actions: read |
59 | | - id-token: write |
60 | | - contents: write |
61 | | - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0 |
| 20 | + |
| 21 | + release-sdk: |
| 22 | + needs: release-please |
| 23 | + if: ${{ needs.release-please.outputs.release-created == 'true' }} |
| 24 | + uses: ./.github/workflows/publish.yml |
62 | 25 | with: |
63 | | - base64-subjects: "${{ needs.release-package.outputs.gem-hash }}" |
64 | | - upload-assets: true |
65 | | - upload-tag-name: ${{ needs.release-package.outputs.upload-tag-name }} |
| 26 | + dry_run: false |
| 27 | + tag_name: ${{ needs.release-please.outputs.tag-name }} |
0 commit comments